Lucene search
+L

3649 matches found

osv_pysec
osv_pysec
•added 2016/09/07 7:28 p.m.•36 views

PYSEC-2016-12

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS5.2AI score0.016EPSS
SaveExploits0References4
PyPA
PyPA
•added 2016/09/07 7:28 p.m.•13 views

PYSEC-2016-12

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS7AI score0.016EPSS
SaveExploits0References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2016/09/07 7:28 p.m.•18 views

UBUNTU-CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS6AI score0.016EPSS
SaveExploits0References2
PyPA
PyPA
•added 2016/09/07 7:28 p.m.•19 views

PYSEC-2016-40

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS7AI score0.016EPSS
SaveExploits0References3Affected Software1
osv_debian
osv_debian
•added 2016/09/07 7:28 p.m.•7 views

DEBIAN-CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS5.5AI score0.016EPSS
SaveExploits0References1
NVD
NVD
•added 2016/09/07 7:28 p.m.•22 views

CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS5AI score0.016EPSS
SaveExploits0References3
Mend
Mend
•added 2016/09/07 7:00 p.m.•7 views

CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

6CVSS0.016EPSS
SaveExploits0References9
CVE
CVE
•added 2016/09/07 7:00 p.m.•100 views

CVE-2016-1241

CVE-2016-1241 affects Tryton 3.x up to 3.2.17, 3.4.x up to 3.4.14, 3.6.x up to 3.6.12, 3.8.x up to 3.8.8, and 4.x up to 4.0.4. The vulnerability allows remote authenticated users to discover user password hashes via unspecified vectors. Reported impact in connected advisories notes exposure of pa...

5.3CVSS4.6AI score0.016EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2016/09/07 7:00 p.m.•48 views

CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5AI score0.016EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2016/09/07 7:00 p.m.•67 views

CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS5.2AI score0.016EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/09/07 12:00 a.m.•6 views

CVE-2016-1241: Exposure of Sensitive Information to an Unauthorized Actor

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...

5.3CVSS6AI score0.016EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/09/07 12:00 a.m.•30 views

Debian: Security Advisory (DSA-3656-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6AI score0.01834EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2016/09/07 12:00 a.m.•28 views

Debian Security Advisory DSA 3656-1 (tryton-server - security update)

Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure of password hashes or file contents. OpenVAS Vulnerability Test $Id: deb3656.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3656-1 usi...

4CVSS5.9AI score0.01834EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2016/09/07 12:00 a.m.•6 views

PT-2016-7219

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 SPH206 Description The issue allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords. Recommendations For versions prior to V200R001C00SPC2...

6.5CVSS0.01129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2016/09/01 8:19 a.m.•36 views

CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

6.5CVSS3.2AI score0.0126EPSS
SaveExploits0References2
Mageia
Mageia
•added 2016/08/31 3:32 p.m.•85 views

Updated openssh packages fix security vulnerability

The dosetupenv function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pamenvironment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as...

7.8CVSS7.2AI score0.88944EPSS
SaveExploits17References4
Positive Technologies
Positive Technologies
•added 2016/08/31 12:00 a.m.•3 views

PT-2016-6286

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.89 on Windows and OS X Google Chrome versions prior to 53.0.2785.92 on Linux Opera affected versions not specified Description The issue is related to the download implementation not properly restricti...

3.1CVSS0.0126EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2016/08/30 12:00 a.m.•2 views

PT-2016-4664

Name of the Vulnerable Software and Affected Versions Tryton versions 3.x before 3.2.17 Tryton versions 3.4.x before 3.4.14 Tryton versions 3.6.x before 3.6.12 Tryton versions 3.8.x before 3.8.8 Tryton versions 4.x before 4.0.4 Description The issue allows remote authenticated users to discover...

6CVSS0.016EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2016/08/29 12:00 a.m.•38 views

SUSE SLES11 Security Update : pam (SUSE-SU-2016:1645-1)

This update for pam fixes two security issues. These security issues were fixed : - CVE-2015-3238: pamunix in conjunction with SELinux allowed for DoS attacks bsc934920. - CVE-2013-7041: Compare password hashes case-sensitively bsc854480. The update package also includes non-security fixes. See...

6.5CVSS6.5AI score0.02705EPSS
SaveExploits1References8
The Hacker News
The Hacker News
•added 2016/08/18 10:37 p.m.•15 views

Warning — Bitcoin Users Could Be Targeted by State-Sponsored Hackers

Another day, another bad news for Bitcoin users. A leading Bitcoin information site is warning users that an upcoming version of the Blockchain consolidation software and Bitcoin wallets could most likely be targeted by "state-sponsored attackers." Recently, one of the world's most popular...

6.3AI score
SaveExploits0
Rows per page
Query Builder